Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EInHHo97kyZRCc7HF3GE5e6TOlI.roa
File:                     EInHHo97kyZRCc7HF3GE5e6TOlI.roa (raw, json)
Hash identifier:          yXTfsQjr+8/ClQP9XXNOVwp4upLb3bXWFm8Cpzpg7Sw=
Subject key identifier:   10:89:C7:1E:8F:7B:93:26:51:09:CE:C7:17:71:84:E5:EE:93:3A:52
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       2284
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EInHHo97kyZRCc7HF3GE5e6TOlI.roa
Signing time:             Fri 25 Nov 2022 04:41:17 +0000
ROA not before:           Fri 25 Nov 2022 04:41:17 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        123.192.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8836 (0x2284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Nov 25 04:41:17 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1089C71E8F7B93265109CEC7177184E5EE933A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:fe:ef:66:e3:6d:21:57:d8:9b:2e:bb:c8:
                    28:c1:bd:c6:9b:22:35:13:f7:de:f5:7f:78:66:af:
                    15:16:35:32:3e:59:22:3d:00:b6:d2:04:19:21:3c:
                    54:80:e8:51:11:5c:a1:2b:c5:6d:bc:b0:a8:d9:e3:
                    13:87:ae:19:ca:2d:7f:98:b2:23:8a:0d:73:19:0c:
                    ca:72:16:89:2f:3f:15:6a:75:c6:1b:0a:d5:87:52:
                    47:31:c8:66:4f:31:48:00:cb:1c:3c:77:fe:59:37:
                    07:10:f6:da:d0:7a:1d:6f:d5:22:7c:b1:63:91:fe:
                    b4:db:7c:f2:fd:55:54:42:49:3c:b2:d3:42:ca:dc:
                    65:49:86:eb:0a:86:61:75:03:7b:2e:d4:9f:40:5c:
                    a3:3a:03:f4:d8:aa:c0:b2:97:8b:2c:23:66:69:f9:
                    6b:77:95:c9:71:90:b4:e4:ae:42:ad:a9:c3:92:6a:
                    1d:e3:cd:aa:33:2f:0b:a4:f2:7c:c0:35:01:ef:ef:
                    f3:6f:08:69:8c:01:d2:18:cd:2d:62:e0:12:20:4c:
                    1b:e2:f7:c8:1f:8b:7c:a5:be:48:e3:d4:80:89:e7:
                    0f:12:e7:fd:e3:8c:73:40:dd:eb:a7:69:cd:2b:9d:
                    9c:aa:ff:0b:47:5d:bd:4a:94:47:79:d2:80:18:2f:
                    86:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:C7:1E:8F:7B:93:26:51:09:CE:C7:17:71:84:E5:EE:93:3A:52
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EInHHo97kyZRCc7HF3GE5e6TOlI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.192.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:9e:44:c2:ce:79:f4:3c:38:ea:34:fd:3a:3a:e5:9a:b5:e5:
         36:47:23:99:fe:de:9a:71:6a:86:07:24:82:aa:8f:30:fa:52:
         3b:8f:05:92:ab:05:71:25:ad:b0:7f:a2:44:da:96:a2:8a:85:
         d8:6e:fc:24:49:a2:86:c2:0c:78:ba:c3:5a:d3:c6:db:22:cc:
         35:b8:cf:fc:e5:60:6c:85:d1:59:62:0d:f9:cc:8d:d1:85:78:
         8b:fc:f1:a0:d5:db:77:86:80:ff:cf:e0:b5:17:76:93:af:b1:
         2a:45:fe:72:52:7f:07:25:38:d7:ba:28:27:46:ae:cb:d1:c2:
         11:db:cb:7a:0b:17:1a:45:aa:e6:1d:19:8d:70:9c:c9:cf:c2:
         76:3d:3f:ac:2d:68:06:8e:53:b6:5e:e3:81:18:5c:e7:bf:47:
         d9:49:a2:d6:33:31:84:6c:73:52:b3:83:af:77:ec:c4:62:5e:
         70:4c:11:d8:73:7f:22:7d:bc:08:65:48:1b:00:c5:60:50:82:
         f9:70:c2:67:ef:21:cd:1e:e4:98:0c:c0:7b:05:e0:34:9d:b3:
         1b:aa:eb:00:74:1e:89:a5:2f:93:f0:66:74:4f:6b:01:f2:e4:
         af:c8:e5:6f:77:ae:8b:1f:fb:f3:93:99:c0:10:f8:ea:ab:74:
         62:ca:42:5a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEwODlDNzFFOEY3Qjkz
MjY1MTA5Q0VDNzE3NzE4NEU1RUU5MzNBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnBv7vZuNtIVfYmy67yCjBvcabIjUT9971f3hmrxUWNTI+WSI9
ALbSBBkhPFSA6FERXKErxW28sKjZ4xOHrhnKLX+YsiOKDXMZDMpyFokvPxVqdcYb
CtWHUkcxyGZPMUgAyxw8d/5ZNwcQ9trQeh1v1SJ8sWOR/rTbfPL9VVRCSTyy00LK
3GVJhusKhmF1A3su1J9AXKM6A/TYqsCyl4ssI2Zp+Wt3lclxkLTkrkKtqcOSah3j
zaozLwuk8nzANQHv7/NvCGmMAdIYzS1i4BIgTBvi98gfi3ylvkjj1ICJ5w8S5/3j
jHNA3eunac0rnZyq/wtHXb1KlEd50oAYL4YrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUEInHHo97kyZRCc7HF3GE5e6TOlIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0VJbkhIbzk3a3laUkNjN0hG
M0dFNWU2VE9sSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wNgwDQYJKoZIhvcNAQELBQADggEBABCeRMLOefQ8OOo0/To65Zq15TZHI5n+3ppx
aoYHJIKqjzD6UjuPBZKrBXElrbB/okTalqKKhdhu/CRJoobCDHi6w1rTxtsizDW4
z/zlYGyF0VliDfnMjdGFeIv88aDV23eGgP/P4LUXdpOvsSpF/nJSfwclONe6KCdG
rsvRwhHby3oLFxpFquYdGY1wnMnPwnY9P6wtaAaOU7Ze44EYXOe/R9lJotYzMYRs
c1Kzg6937MRiXnBMEdhzfyJ9vAhlSBsAxWBQgvlwwmfvIc0e5JgMwHsF4DSdsxuq
6wB0HomlL5PwZnRPawHy5K/I5W93rosf+/OTmcAQ+OqrdGLKQlo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org